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WHAT IS CLAIMED IS: 

1. An encrypting device comprising: 

key generation means for generating two prime 
numbers p and q of which product is n=pq as a private 
key and generating as a public key gi and g2 respectively 
given by the following Equations (1) and (2) using two 
random numbers s and t and a maximal generator g in a 
multiplicative group of integers modulo n; and 

encrypting arithmetic means for, in response to 
receipt of a plaintext m, generating a ciphertext C = (Ci, C2) 
respectively given by the following Equations (3) and (4) 
using the public key {gi, g2}, a private key n, and random 
numbers rl and r2, 

gl =gs( P -i) ( m od n), (1) 

g2 = gt(q-l) ( mod n)> (2) 

Ci = m-gi rl (mod n), (3) 
C2 = m g2 r2 (mod n), (4) 
where gcd{s, q-l}=l and gcd{t, p-l}=l. 

2. An encrypting device comprising: 

key generation means for generating prime numbers 
p and q of which product is n=pq, where p is a private key, 
and generating as a public key gi given by the following 
Equation (1) using a random number s and a maximal 
generator g in a multiplicative group of integers modulo n; 
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and 

encrypting arithmetic means for, in response to 
receipt of a plaintext m, generating a ciphertext C given by 
the following Equation (3)' using the public key gi, a 
private key n, and a random number r, 

gl = gS (p-i) ( m od n), (1) 

C = m-gi r (mod n), (3)' 
where when information b is a size of p (bits), 0<m<2 bl 
and gcd{s, q-l}=l. 

3. The encrypting device according to claim 1, 
wherein: 

e given by the following equation: e = h(d) (h is 
one-way hash function), where d=(Ci + C2)/m (mod n), is 
added to the ciphertext C = (Ci, C2) so as to be a ciphertext 
C = (Ci, C 2 , e). 

4. The encrypting device according to claim 1, 
further comprising: 

a database for saving data resulting from calculation 
of a random number portion of the ciphertext C. 

5. The encrypting device according to claim 1, 
wherein: 

the encrypting arithmetic means encrypt only a 
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plaintext element mi, which is a first element in the 
plaintext m, to the ciphertext element Ci = (Cn, C12), and 
ciphertext elements following the ciphertext element Ci 
are generated using a received plaintext mi, bit 
information of the plaintext mi, and two random numbers 
Ri or R2 which are contained in the ciphertext Ci. 

6. A decrypting device wherein included are 
decrypting arithmetic means for receiving a ciphertext 
C=(Ci, C 2 ), which is an encrypted plaintext m, respectively 
given by the following Equations (3) and (4) using a public 
key {gi, g2}, a private key n, and random numbers rl and 
r2, the private key n being n = pq where p and q are prime 
numbers generated as a private key, gi and g2 being 
respectively given by the Equations (1) and (2) using two 
random numbers s and t and a maximal generator g in a 
multiplicative group of integers modulo n, and 

performing decryption in such a manner so as to 
generate received ciphertexts a and b respectively given by 
the following Equations (5) and (6) using the Fermat's 
little theorem and then derive the plaintext m satisfying 
the following Equation (7) from the received ciphertexts a 
and b using the Chinese remainder theorem, 

gl = g s(p-i) ( mo d n), (1) 

g2 = gt(q-i) (mod n), (2) 
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Ci=m gi rl (mod n), 



(3) 



C2 = m*g2 r2 (mod n), 



(4) 



a=Ci (mod p) = m (mod p), 



(5) 



b = C2 (mod q) = m (mod q), 



(6) 



m=aAq+bBp (mod n), 



(7) 



where gcd{s, q-l}=l, gcd{t, p-l}=l, Aq (mod p)=l, and Bp 
(mod q)= 1 . 

7. A decrypting device wherein included are 
decrypting arithmetic means for receiving a ciphertext C of 
an inputted plaintext m, given by the following Equation 
(3)' using a public key gi, a private key n, and a random 
number r, the private key n being n = pq where p and q are 
prime numbers, p being generated as a private key, gi 
being given by the following Equation (1) using a random 
number s and a maximal generator g in a multiplicative 
group of integers modulo n, and 

performing decryption in such a manner so as to 
derive the plaintext m satisfying the following Equation (8) 
using the Fermat's little theorem, 

gl = gs( P -i) (mod n), (1) 

C = m gi r (mod n), (3)' 

m = C (mod p), (8) 
where gcd{s, q-l}=l. 
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8. A cryptosystem comprising: 

an encrypting device including: key generation 
means for generating two prime numbers p and q of which 
product is n = pq as a private key and generating as a 
public key gi and g2 respectively given by the following 
Equations (1) and (2) using two random numbers s and t 
and a maximal generator g in a multiplicative group of 
integers modulo n; and encrypting arithmetic means for, 
in response to receipt of a plaintext m, generating a 
ciphertext C = (Ci, C2) respectively given by the following 
Equations (3) and (4) using the public key {gi, g2}, a 
private key n, and random numbers rl and r2; and 

a decrypting device including decrypting arithmetic 
means for receiving ciphertext elements Ci and C2 
calculated by the encrypting device and performing 
decryption in such a manner so as to generate received 
ciphertexts a and b respectively given by the following 
Equations (5) and (6) using the Fermat's little theorem 
and then derive the plaintext m satisfying the following 
Equation (7) from the received ciphertexts a and b using 
the Chinese remainder theorem, 

gl = g s(p-i) (mod n), (1) 



g2 = g t(q-i) ( m od n), 



(2) 



Ci = m*gi rl (mod n), 



(3) 



C2 = m-g2 



r2 (mod n), 



(4) 
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a=Ci (mod p) = m (mod p), 



(5) 



b=C2 (mod q) = m (mod q), 



(6) 



m=aAq+bBp (mod n), 



(7) 



where gcd{s, q-l}=l, gcd{t, p-l}=l, Aq (mod p)= 1 , and Bp 
(mod q)=l. 

9. A cryptosystem comprising: 

an encrypting device including: key generation 
means for generating prime numbers p and q of which 
product is n = pq, where p is a private key, and generating 
as a public key gi given by the following Equation (1) 
using a random number s and a maximal generator g in a 
multiplicative group of integers modulo n; and encrypting 
arithmetic means for, in response to receipt of a plaintext 
m, generating a ciphertext C given by the following 
Equation (3)' using the public key gi, a private key n, and 
a random number r; and 

a decrypting device including decrypting arithmetic 
means for receiving the ciphertext C from the encrypting 
device and performing decryption in such a manner so as 
to derive the plaintext m satisfying the following Equation 
(8) using the Fermat's little theorem, 



g 1= gs(p-i) (mod n), 



(1) 



C = m-gi r (mod n), 



(3)' 



m=C (mod p), 



(8) 
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where gcd{s, q- 1}= 1 . 

10. An encrypting method comprising the steps of: 
generating two prime numbers p and q of which 

product is n=pq as a private key and generating as a 
public key gi and g2 respectively given by the following 
Equations (1) and (2) using two random numbers s and t 
and a maximal generator g in a multiplicative group of 
integers modulo n; and 

in response to receipt of a plaintext m, generating 
ciphertext elements Ci and C2 respectively given by the 
following Equations (3) and (4) using the public key {gi, 
g2>, a private key n, and random numbers rl and r2, 

gl = gs( P -i) ( m od n), (1) 

g2 = g t(q-i) (mod n), (2) 

C^m-gi*- 1 (mod n), (3) 

C2=m-g 2 r2 (mod n), (4) 
where gcd{s, q-l}=l and gcd{t, p- 1}= 1 . 

11. An encrypting method comprising the steps of: 
generating prime numbers p and q of which product 

is n=pq, where p is a private key, and generating as a 

public key gi given by the following Equation (1) using a 

random number s and a maximal generator g in a 
multiplicative group of integers modulo n; and 



- 65 - 

in response to receipt of a plaintext m, generating a 
ciphertext C given by the following Equation (3)' using the 
public key gi, a private key n, and a random number r, 

gl = g s(p-i) (mod n), (1) 

C=m-gi r (mod n), (3)* 
where when information b is a size of p (bits), 0<m<2 b ' 1 
and gcd{s, q-l}=l. 

12. A decrypting method comprising the steps of: 

receiving a ciphertext C = (Ci, C2), which is an 
encrypted plaintext m, respectively given by the following 
Equations (3) and (4) using a public key {gi, g2>, a private 
key n, and random numbers rl and r2, the private key n 
being n=pq where p and q are prime numbers generated as 
a private key, gi and g2 being respectively given by the 
Equations (1) and (2) using two random numbers s and t 
and a maximal generator g in a multiplicative group of 
integers modulo n; and 

performing decryption in such a manner so as to 
generate received ciphertexts a and b respectively given by 
the following Equations (5) and (6) using the Fermat's 
little theorem and then derive the plaintext m satisfying 
the following Equation (7) from the received ciphertexts a 
and b using the Chinese remainder theorem, 

gl = g s(p-i) (mod n), (1) 



- 66 - 



g2 = gt(q-i) (mod n), 



(2) 



Ci=m-gi rl (mod n), 



(3) 



C2=m-g2 r2 (mod n), 



(4) 



a=Ci (mod p) = m (mod p), 



(5) 



b=C2 (mod q) = m (mod q), 



(6) 



m = aAq+bBp (mod n), 



(7) 



where gcd{s, q-l}=l, gcd{t, p-l}=l, Aq (mod p)=l, and Bp 
(mod q) = 1 . 

13. A decrypting method comprising the steps of: 
receiving a ciphertext C of an inputted plaintext m, 
given by the following Equation (3)' using a public key gi, 
a private key n, and a random number r, the private key n 
being n = pq where p and q are prime numbers, p being 
generated as a private key, gi being given by the following 
Equation (1) using a random number s and a maximal 
generator g in a multiplicative group of integers modulo n; 
and 

performing decryption in such a manner so as to 
derive the plaintext m satisfying the following Equation (8) 
using the Fermat's little theorem, 

gl = g s{p-i) ( mo d n), (1) 



C = m*gi r (mod n), 



(3) 



m=C (mod p), 



(8) 



where gcd{s, q- 1}= 1 . 



